Lucene search

K
freebsdFreeBSDE5423CAF-8FB8-11E5-918C-BCAEC565249C
HistoryNov 20, 2015 - 12:00 a.m.

libxml2 -- multiple vulnerabilities

2015-11-2000:00:00
vuxml.freebsd.org
19

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.018 Low

EPSS

Percentile

87.9%

reports:

CVE-2015-5312 Another entity expansion issue (David Drysdale).
CVE-2015-7497 Avoid an heap buffer overflow in
xmlDictComputeFastQKey (David Drysdale).
CVE-2015-7498 Avoid processing entities after encoding
conversion failures (Daniel Veillard).
CVE-2015-7499 (1) Add xmlHaltParser() to stop the parser
(Daniel Veillard).
CVE-2015-7499 (2) Detect incoherency on GROW (Daniel
Veillard).
CVE-2015-7500 Fix memory access error due to incorrect
entities boundaries (Daniel Veillard).
CVE-2015-7941 (1) Stop parsing on entities boundaries
errors (Daniel Veillard).
CVE-2015-7941 (2) Cleanup conditional section error
handling (Daniel Veillard).
CVE-2015-7942 Another variation of overflow in
Conditional sections (Daniel Veillard).
CVE-2015-7942 (2) Fix an error in previous Conditional
section patch (Daniel Veillard).
CVE-2015-8035 Fix XZ compression support loop
(Daniel Veillard).
CVE-2015-8242 Buffer overead with HTML parser in push
mode (Hugh Davenport)

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibxml2< 2.9.3UNKNOWN

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.018 Low

EPSS

Percentile

87.9%